Cyber Security Analyst
Information security analyst job in Beaverton, OR
FLEX IT has an immediate need for a Cyber Security Analyst with a proven track record of delivering world-class results with our Enterprise level client. The ideal candidate will bring a broad range of lean and agile experiences working within large-scale organizations.
ALL LEVELS OF Cyber Security Analysts ARE ENCOURAGED TO APPLY
Top Skillsets: (Based on Requirement)
?-Knowledge of information security standards, principles, and practices
-Computer programming and/or scripting languagues (Python, Powershell, Java Script, Go)
-Experience with massive log aggregation and analysis
-Comfortable interfacing with other organizations regarding security policy
Job Responsibilities:
Elevate security analytics by distilling complex analytical concepts
Enable a culture of data driven decision making
Minimize complexity and focus on results
Thrive in an entrepreneurial environment
Use data to prove your point, think outside the box and solve problem creatively
Identity Security Analyst
Information security analyst job in Hillsboro, OR
The world is transforming - and so is Intel. Intel is a company of bold and curious inventors and problem solvers who create some of the most astounding technology advancements and experiences in the world. With a legacy of relentless innovation and a commitment to bring smart, connected devices to every person on Earth, our diverse and brilliant teams are continually searching for tomorrow's technology and revel in the challenge that changing the world for the better brings.
We work every single day to design and manufacture silicon products that empower people's digital lives. Come join us and do something wonderful. Who we Are: Intel's Information Security organization enables Intel to provide secure products, solutions, and services which meet U.S. regulatory requirements. The Information Security organization supports the unique IT information Security and Compliance requirements for Intel Federal projects that deliver products and/or services to the US Government (USG).
As part of this team, you will help us grow our secure solution suite to meet U.S. Government requirements. The Intel Information Security organization is seeking an Identity Security Analyst. The candidate chosen for this role will assist senior engineers with design, architecture, and build of secure classified network products to support USG operations.
**Primary duties and responsibilities:**
+ Design, deploy, and manage enterprise-grade PKI solutions.
+ Lead certificate lifecycle management efforts using EJBCA.
+ Automate PKI-related tasks and processes.
+ Collaborate with security, infrastructure, and DevOps teams to integrate PKI solutions with various platforms and applications.
+ Develop and enforce policies, standards, and best practices for certificate issuance, renewal, and revocation.
+ Monitor PKI infrastructure health, availability, and compliance with internal and regulatory requirements.
+ Troubleshoot PKI-related issues including certificate chain validation, CRL/OCSP configurations, and encryption/signing issues.
+ Provide documentation, technical guidance, and training to internal teams.
+ Business travel is required as needed.
+ Ability to thrive in dynamic and fast-paced environments
**Qualifications:**
You must possess the below minimum qualifications to be initially considered for this position. Preferred qualifications are in addition to the minimum requirements and are considered a plus factor in identifying top candidates. Experience listed below would be obtained through a combination of your degree, research and or relevant previous job and or internship experiences.
**Minimum Qualifications:**
+ US Citizenship required Ability to obtain and maintain a US Government Security Clearance
+ High School /Equivalent Diploma and 3+ years of applicable experience with at least one of the following security certifications: CISSP, CEH, SSCP OR Bachelor's degree and 2+ years of applicable experience.
+ 1+ years' experience in designing and implementing custom SailPoint solutions
+ 2+ years' experience configuring Access Profiles, Roles, and Identity Profiles
+ 2+ years' experience in Active Directory
+ 2+ years' experience in APIs (RESTful services preferred)
+ 1+ years' experience in implementing and supporting SailPoint IIQ modules like Compliance Manager, Lifecycle Manager, Integration modules, in both production and nonproduction environments
**Preferred Qualifications:**
+ Active US Government Top Secret (TS) Security Clearance with the ability to obtain and maintain SCI access Bachelor's degree in Systems Engineering, Cyber Security Engineering, Computer Engineering, Computer Science, Information Systems, or similar discipline and four years of work-related experience; or an equivalent combination of education and experience
+ Experience with DoD security implementation (e.g. STIG) and security tools for managing the environment
+ Experience with business continuity and disaster recovery
+ Experience with scripting in the Windows and UNIX environment
+ Experience with Microsoft SQL Server 2019/2022Experience with Web Tech: HTML, JavaScript, JSP, XML, XSL, and DTD
+ Requirements listed would be obtained through a combination of industry relevant job experience, internship experiences and or schoolwork/classes/research.
**Job Type:**
Experienced Hire
**Shift:**
Shift 1 (United States of America)
**Primary Location:**
US, California, Santa Clara
**Additional Locations:**
US, Arizona, Phoenix, US, Oregon, Hillsboro
**Business group:**
As members of the Finance team, employees act as full partners in making and supporting business decisions that are aimed at maximizing shareholder value. Intel Finance has a strong focus on facilitating change and improvement both within finance and in the operations supported.
**Posting Statement:**
All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.
**Position of Trust**
N/A
**Benefits:**
We offer a total compensation package that ranks among the best in the industry. It consists of competitive pay, stock, bonuses, as well as, benefit programs which include health, retirement, and vacation. Find more information about all of our Amazing Benefits here:
**********************************************************************************
Annual Salary Range for jobs which could be performed in the US: 123,130.00 USD - 173,830.00 USD
The range displayed on this job posting reflects the minimum and maximum target compensation for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific compensation range for your preferred location during the hiring process.
**Work Model for this Role**
This role will require an on-site presence. * Job posting details (such as work model, location or time type) are subject to change.
Information Security Analyst I
Information security analyst job in Portland, OR
TITLE: N/A JOB CODE: FLSA: Exempt SALARY GRADE: 7 CATEGORY: Full-time UNION REPRESENTATION: NA SCHEDULE: Hybrid SUPERVISORY ROLE Y/N: 11.2025 The Information Security Analyst I plays a critical role in safeguarding the organization's systems and information assets. This position supports the development and implementation of security strategies, tools, and guidelines to protect against unauthorized access, data breaches, and system disruptions.
Responsibilities include monitoring and responding to Information Security-related alerts, supporting audit and risk assessment activities, evaluating internal controls, and recommending improvements to enhance security posture.
The analyst assists in migrating non-compliant environments to meet regulatory standards and ensures adherence to data protection laws and banking industry compliance requirements. This role is foundational to maintaining the confidentiality, integrity, and availability of sensitive financial data and supporting the organization's overall cybersecurity framework.
ESSENTIAL DUTIES
Identity and Access Management
Support access provisioning, modification, and termination processes to ensure timely and secure access control.
Conduct administrator activity and user access reviews across IT systems, including privileged access audits and firewall/cloud app usage monitoring.
Maintain asset and access inventories, perform recurring audits of critical systems, and reconcile against endpoint and network tools.
Security Monitoring and Incident Response
Monitor and respond to alerts from SIEM, IDS, firewalls, and endpoint protection systems.
Conduct vulnerability scans, track remediation efforts, and facilitate related meetings.
Maintain readiness for incident response activation, including participation in tabletop exercises.
System Administration and Tool Management
Administration of cloud computing environments, conditional access, and guest provisioning following established best practices.
Manage software controls, browser extensions, and patching processes.
Administer security camera system and ensure system uptime.
Administer Mobile Device Management system.
Threat Intelligence and Continuous Improvement
Stay informed on emerging threats in the banking sector and contribute to threat intelligence reporting.
Research and test new security tools, controls, and AI applications to enhance the Bank's security posture.
Correctly identify true and false positives in alerting systems and tune these systems for continuous improvement.
Security Awareness and Training
Support phishing simulations and training campaigns, track completion, and report metrics to management.
Documentation and Reporting
Log findings, remediation efforts, and audit results in a structured ticketing system.
Assist with vendor management program administration and reporting.
Data Protection and Compliance
Ensure compliance with GLBA, FFIEC, and other applicable regulations through log retention, configuration management oversight, and DLP monitoring.
Administer data classification tools and respond to violations involving PII or sensitive data.
Audit VPN usage and test controls across email, endpoint, and network security platforms.
Completes mandatory compliance training in accordance with established deadlines.
The position performs duties specific to the position and other functions as assigned.
ROLE COMPETENCIES/SKILLS
Attention to Detail
Collaboration & Communication
Diversity & Inclusion
Execution & Ownership
Time Management
Compliance
Innovation
Systems Thinking
Data Analysis & Management
Information Security
Network Operations
Critical Thinking
Consulting
Analytical Thinking
ENVIRONMENT, PHYSICAL & MENTAL ACTIVITIES
The incumbent is in a non-confined office-type setting in which they are free to move about at will. It may include some minor annoyances such as noise, odors, drafts, etc. For Hybrid and Remote roles, work may also be performed away from BSB worksites depending on the position and requirements. For Hybrid/Remote work, employees are required to have an environment when working at home that has a dependable, high-speed internet connection and environment conducive to frequent phone or internet calls where private, confidential or other information is not visible, able to be overheard, or physically or electronically accessible to anyone else.
The incumbent in the course of performing this position spends time writing, typing, speaking, listening, lifting (up to 10 pounds), driving, carrying, seeing (such as close, color and peripheral vision, depth perception and adjusted focus), sitting, pulling, walking, standing, squatting, kneeling and reaching.
The incumbent for this position may operate any or all of the following: personal computer, cellular telephone, printer, fax, and other standard office equipment.
The incumbent in this position must be able to accommodate reading documents or instruments, detailed work, problem solving, customer contact, reasoning, math, language, presentations, verbal and written communication, analytical reasoning, stress, multiple concurrent tasks and constant interruptions.
The work environment characteristics, physical and mental demands described here are representative of those an employee encounters while performing the essential functions of this job.
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
POSITION REQUIREMENTS
Minimum Qualifications
Bachelor's degree in Information Technology, Cybersecurity, or a related field, or equivalent combination of education and experience.
5 years of professional experience in IT support or related technical roles.
Foundational understanding of cybersecurity principles, including access control, endpoint protection, and network monitoring.
Familiarity with Microsoft 365, Active Directory, and basic system administration tasks.
Ability to conduct audits, manage tickets, and document findings accurately.
Strong analytical and troubleshooting skills.
Effective communication skills and ability to collaborate across departments.
Preferred Qualifications
Bachelor's degree in Information Technology, Cybersecurity, or a related field.
Experience with banking industry compliance standards (e.g., GLBA, FFIEC).
Hands-on experience with security tools such as SIEM, DLP, IDS/IPS, EDR, Email Filtering, and Firewalls.
Exposure to vulnerability management platforms and identity/access management processes.
Familiarity with Microsoft cloud services and Mobile Device Management.
Experience supporting or administering phishing simulations, security awareness programs, or similar efforts.
Knowledge of vendor management platforms and data classification tools.
Management reserves the right to change this position description at any time according to business needs. #LI_Hybrid
Specialist Director, Cyber TSA
Information security analyst job in Portland, OR
KPMG Advisory practice is currently our fastest growing practice. We are seeing tremendous client demand, and looking forward we do not anticipate that slowing down. In this ever-changing market environment, our professionals must be adaptable and thrive in a collaborative, team-driven culture. At KPMG, our people are our number one priority. With a wealth of learning and career development opportunities, a world-class training facility and leading market tools, we make sure our people continue to grow both professionally and personally. If you're looking for a firm with a strong team connection where you can be your whole self, have an impact, advance your skills, deepen your experiences, and have the flexibility and access to constantly find new areas of inspiration and expand your capabilities, then consider a career in Advisory.
KPMG is currently seeking a Specialist Director, MAST Application Penetration Testing Lead to join our Managed Services practice.
Responsibilities:
* Lead the strategic delivery of Managed Application Security Testing (MAST) services, ensuring alignment with client objectives and industry best practices
* Execute go-to-market (GTM) strategies for MAST offerings, collaborating with cross-functional teams to drive market penetration and revenue growth
* Oversee the design and implementation of scalable security testing frameworks across diverse application environments, including cloud-native and hybrid architectures
* Provide subject matter expertise in application security, guiding clients through risk assessments, remediation planning, and secure development lifecycle integration
* Build and maintain strong client relationships, serving as a trusted advisor and ensuring high levels of satisfaction and retention
* Mentor and lead a team of security professionals, fostering a culture of innovation, accountability, and continuous improvement
* Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
* Minimum eight years of recent experience in application security, penetration testing, or related cybersecurity domains, with at least three years in a leadership or director-level role
* Master's degree from an accredited college or university in cybersecurity, computer science, or related field is preferred; Bachelor's degree from an accredited college or university is required
* Deep understanding of application security testing methodologies, tools (for example, DAST, SAST, IAST), and secure SDLC practices
* Proven experience developing and executing GTM strategies for security services or technology solutions
* Strong client-facing skills with the ability to communicate complex technical concepts to non-technical stakeholders
* Excellent verbal/written communication, presentation, and analytical skills
* Ability to travel as required
* Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
KPMG LLP and its affiliates and subsidiaries ("KPMG") complies with all local/state regulations regarding displaying salary ranges. If required, the ranges displayed below or via the URL below are specifically for those potential hires who will work in the location(s) listed. Any offered salary is determined based on relevant factors such as applicant's skills, job responsibilities, prior relevant experience, certain degrees and certifications and market considerations. In addition, KPMG is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday. Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at Benefits & How We Work.
Follow this link to obtain salary ranges by city outside of CA:
**********************************************************************
California Salary Range: $153700 - $319000
KPMG offers a comprehensive compensation and benefits package. KPMG is an equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws. The attached link contains further information regarding KPMG's compliance with federal, state and local recruitment and hiring laws. No phone calls or agencies please.
KPMG recruits on a rolling basis. Candidates are considered as they apply, until the opportunity is filled. Candidates are encouraged to apply expeditiously to any role(s) for which they are qualified that is also of interest to them.
Los Angeles County applicants: Material job duties for this position are listed above. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness, and safeguard business operations and company reputation. Pursuant to the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers, Fair Chance Initiative for Hiring Ordinance, and San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
PERS - Information Security Analysis
Information security analyst job in Tigard, OR
Founded in 2017 Perfecta is a division and a wholly owned subsidiary of City National Security a well known and reputed company providing IT Consulting , Staffing and Security services throughout the United States. Perfecta brings a rich experience of over 12 years in providing fully scaled IT Consulting and Staffing & Recruiting services. Perfecta brings a successful track record of delivering value based quality professional solutions at economical price to its customers across the U.S. Perfecta has successfully executed various IT and Staffing projects with its government and commercial clients and has consistently provided quality services to its customers.
Job Description
Part I. General Information
Under this Statement of Work (SOW), the Contractor shall analyze, recommend, create working documentation, guidelines, policies, standards, instructional procedures, and conduct assessments to support the implementation of the following:
• PERS Information Security Awareness and Training Program
• PERS Information Security Program
• Reorganization and alignment of PERS Information Security policies, standards, and procedures
Part II. Work
The Contractor shall comply with OPERS contractual deliverable review and approval processes by working with OPERS Quality Assurance in utilizing the Quality Checkpoint process attached to this SOW as Attachment 1. Quality Checkpoint is a Quality Assurance process to verify that major deliverables in the project have been reviewed and approved by their respective stakeholders.
PERS Information Security Awareness and Training Program
Contractor shall assist OPERS' CISO in the creation, documentation, and implementation of a structured Information Security Awareness and Training Program. Contractor shall work with OPERS to plan, document and implement solutions to fit the needs of OPERS. Tasks to support OPERS' Information Security Awareness and Training Program include, but not limited to:
1. Define activities to be performed to enable and implement the Security Awareness and Training Program
2. Research and document materials needed to implement the program
3. Research and document delivery methods and related activities to implement the program
4. Research, obtain stakeholder buy-in, and document a regularly occurring schedule of activities.
5. Develop content for PERS specific, role based training for data/system owners/custodians.
6. Develop content, produce materials for PERS specific training for staff.
7. Deliver Security, Awareness and Training materials, presentations, etc. to targeted audiences
Reorganization of PERS Information Security policy structure
In the first phase of policy, standard, procedure creation, emphasis was placed on creating required policy documentation to address HPE findings. In this second phase, the emphasis is to consolidate and reorganize the policy structure, resulting in fewer policies, and more specific requirements, based on security domains:
1. Identify and convert redundant policies to standards as appropriate
2. Align policy structure to NIST CSF domains
3. Address gaps by creating policies, standards, and procedures as identified and needed.
Implementation of PERS Information Security Program
Initialize and implement operation of Information Security program:
1. Conduct Third Party and Software Development Information Security assessments
2. Initialize policy exception requesting, approval, denial, and risk acceptance process.
Part III. Special Considerations
Contractor acknowledges and agrees that any and all information regarding OPERS installation, design, configuration, data migration will be kept confidential.
Part IV. Travel and Other Expenses
OPERS shall not reimburse Contractor for any expenses under this Contract. Work must be completed on-site, Tigard, OR
Additional Information
All your information will be kept confidential according to EEO guidelines.
Information Systems Security Officer
Information security analyst job in Camas, WA
At PLEXSYS, our teams design, build and deliver Live, Virtual, and Constructive (LVC) innovation and training solutions to customers around the world. With over 200 employees in seventeen states and four foreign countries, we contribute our success to enabling better training…everyday…across the globe.
As an employee of PLEXSYS, you'll find a culture that empowers you to achieve your professional objectives, give your personal best, and work with other highly passionate individuals. Our core values of integrity, excellence, teamwork and agility drive our daily decisions, identify our focus areas, and inspire our organizational culture.
GENERAL DESCRIPTION
The Information System Security Officer (ISSO) is responsible for ensuring the appropriate operational security
posture for information systems and as such, works in close collaboration with the ISSM, CPSO, and FSO. The
ISSO must have detailed knowledge and expertise required to manage the security aspects of an information
system and is assigned the day-to-day responsibility for assigned systems. Responsibilities include
implementation of the requirements of Risk Management Framework, including the Joint Special Access
Program (SAP) Implementation Guide (JSIG), NIST 800-53, or other security requirements as assigned.
This position will report to the Corporate Information Assurance Manager and work in close collaboration with
the AFSO and FSO. The ISSO is responsible for developing and updating the security authorization package, managing and controlling changes to the system, and assessing the security impact of those changes.
Ensure systems are operated, maintained, and disposed of following security policies and procedures as outlined
in the security authorization package.
Report all security-related incidents to the ISSM.
Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
Monitor system recovery processes to ensure security features and procedures are properly restored and
functioning correctly.
Ensure audit records are collected, reviewed, and documented.
Duties also include physical and environmental protection, personnel security, and incident handling.
DUTIES & RESPONSIBILITIES
Lead the information system security program for their assigned location to include implementation and
validation of automated informational security, ensuring security requirements as contracted are
satisfied
Maintain and establish the accreditation of classified information systems
Establish and implement security procedures and practices in support of Corporate goals and current
DoD Regulations
Ensure all security procedures are being followed such as patching, AV updates, continuous monitoring,
trainings, and self-inspections
Develop, implement and maintain security emergency action plans
Provide security education and training to local employees
Maintain administrative security records and documents for local employees
Conduct self-inspections to ensure current security measures and policies are effective
Conduct random security inspections to ensure regulations and procedures are being adhered to by
local employees
Conduct system audits in accordance with security accreditation package requirement
Lead the information system security program for their assigned location to include implementation and validation of automated informational security, ensuring security requirements as contracted are satisfied
Maintain and establish the accreditation of classified information systems
Establish and implement security procedures and practices in support of Corporate goals and current DoD Regulations
Ensure all security procedures are being followed such as patching, AV updates, continuous monitoring, trainings, and self-inspections
Develop, implement and maintain security emergency action plans
Provide security education and training to local employees
Maintain administrative security records and documents for local employees
Conduct self-inspections to ensure current security measures and policies are effective
Conduct random security inspections to ensure regulations and procedures are being adhered to by local employees
Conduct system audits in accordance with security accreditation package requirements
Conduct vulnerability scans and analysis
Conduct maintenance on the networks, systems, and hardware
Perform software upgrades on networks, systems, and hardware
Perform security assignments in accordance with the Automated Information System requirements and local regulations
Understand and follow NISPOM/ODAA/RMF/JAFAN/ICD/NIST/JSIG classified system accreditation and certification requirements
Other duties as assigned
REQUIREMENTS
Bachelor's degree in related field or 4 years' experience in related field
DoD 8570 compliant, IAT Level II
Experience with Windows based administration of Information Systems
Ability to work within compliance standards; previous experience with RMF, HIPAA , PCI DSS, or
equivalent compliance standard preferred
Strong experience in networking, active directory, centralized logging solutions, vulnerability scanning
and anti-virus solutions
Experience with security audits for information systems
Strong communication and problem-solving skills
Ability to work in both a team environment as well as independently
Must be organized and detail oriented
Ability to obtain and maintain Top Secret clearance with the ability to obtain approval for SAP/SCI access
DESIRABLE
Have previous experience with DoD Security Regulations and Policies
PERKS
As a PLEXSYS employee, you can expect certain advantages; such as advancement based on performance, competitive wages, valuable benefits and a great working environment. Our team is committed to ensuring an environment that empowers individuals to realize their full potential by providing opportunities and necessary support to achieve personal and professional goals.
Medical/Vision/Prescription/Dental Benefits
Life, AD&D and Long Term Disability Coverage
Paid Holidays, Military Leave, and Paid Time Off
401k Plan with eligibility from first day of employment
Education reimbursement for job-related courses for full-time employees
PriceClub/COSTCO/Sam's Club annual membership
IT Compliance Analyst
Information security analyst job in Portland, OR
Change Mgmt & IT Compliance; Portland, Oregon (US-OR) Hybrid schedule available for Oregon & Washington residents. Regular FT Posting # 5338 About Us: At NW Natural, we offer more than rewarding career opportunities and a vibrant, inclusive work culture. We invite you to join us in providing safe and reliable utility services and renewable energy to better the lives of the communities we serve. Our vision is to be the leader in service excellence, innovation and environmental stewardship for our customers, while building on our strengths as a trusted energy provider and environmental leader for our industry.
In addition to environmental stewardship, we're also deeply committed to Diversity, Equity and Inclusion at NW Natural. Our DEI Council started 21 years ago, and today we continue to foster a culture where all employees can experience a sense of belonging, shared purpose and possibility.
The Role:
NW Natural is recruiting for IT Compliance Analyst I/II/III positions. These positions will be reporting to the IT&S compliance manager and will work closely with IT&S Security and other technical, non-technical teams as well as internal or external auditors. The primary purpose of this position is to ensure Information Technology & Services (IT&S) department is in compliant with state and federal regulations by creating, monitoring, evaluating, and reporting on the effectiveness of operational controls within Information Technology (IT) and Industrial Control System (ICS) environments.
Day to Day:
* Ensure company complies with all local, state and federal requirements.
* Performing and coordinating the testing of key controls, documenting findings, and ensuring controls are effectively designed and operating as intended.
* Collaborate with internal and external auditors to facilitate walkthroughs, evidence collection, and remediation tracking.
* Assist in the development and maintenance of IT compliance policies, procedures, and control frameworks.
* Monitor and report on control deficiencies, remediation plans, and risk mitigation strategies.
* Conduct security risk assessments of third-party vendors, including review of SOC reports, security questionnaires, and contractual obligations.
* Evaluate vendor responses and identify potential risks or gaps in security controls.
* Work with business units and procurement to ensure vendors meet security and compliance standards.
* Maintain a centralized repository of vendor assessments and risk ratings.
Come on your first day with:
Qualifications:
* Bachelor's degree in related field or equivalent education/experience.
* Understanding of IT systems, applications, networks and databases.
* Knowledge of SOX and Operational Controls.
* 2 + years of experience in working on a IT compliance program and/or information security program for level 2. More advanced experience required for level 3 including managing more complex tasks, broader responsibilities, and increased autonomy in decision-making or leading initiatives.
* Familiarity with SOX, NIST, ISO 27001, or similar regulatory frameworks.
* Experience with third-party risk management tools and processes.
* Analytical, communication, and organizational skills.
* Ability to work independently and collaboratively in a fast-paced environment.
* Understanding of assessing and designing internal and security controls.
* Experience in developing and submitting audit and compliance reports to governing.
* Understanding of cloud security and modern IT environments.
Recommended:
* Experience in planning, organizing, and developing information technology policies, procedures, and practices.
* Ability to propose creative solutions to successfully remediate identified compliance issues.
* Certifications in one or more of the following areas preferred: CISA, CRISC, CISSP, and CISM.
What we offer:
Health & Wellness -
* Rich health insurance benefits with competitive employer contribution
* Free access to an online wellness resources platform
Work Life Balance -
* Up to 23 Vacation Days
* 80 Hours of Sick Time
* 10 paid holidays and 3 floating holidays
* Flexible work arrangements
* 3 weeks paid parental leave
* Green Team / Diversity, Equity & Inclusion Council / Safety Team / Women's Network and many other Employee Resource Groups
* 1500 sq foot exercise facility and secure bike room
Financial -
* Meaningful annual incentive bonus opportunity in addition to base salary
* Competitive 401K company contribution and match
* 15% discount on NW Natural stock through Employee Stock Purchase Program
* Up to $5250 a year in tuition reimbursement
* Wellness incentive program
Discounts -
* 20% off natural gas service
* Up to 30% discount at NW Natural Appliance Center
* TriMet Pass for all HQ employees
* Generous discounts with Verizon & AT&T Wireless
Base salary range: $86,500.00 - $123,250.00 (Level 2) or $96,000.00 - $136,800.00 (Level 3) per year, depending on qualifications
Annual Target Incentive: Level 2, 9.5% target
Level 3, 9.5% target
Targets are calculated using eligible earnings during plan year participation. Payout, if earned, is based on company and individual performance for each plan year and may range from 0% - 200% of target. Targets are subject to change in subsequent plan years. Must be employed by September 30 in order to receive any prorated payout.
Application Process: To be considered for this position, submit a complete electronic application including cover letter and resume via our website.
******************************************************
Deadline: 1/5/26
Disclosure: We are a drug free workplace and we comply with Federal Drug Free Workplace Act and Department of Transportation regulations. NW Natural participates in E-Verify. Individuals hired will have their Form I-9 information submitted to E-Verify. E-Verify is an Internet-based system that compares information from an employee's Form I-9, Employment Eligibility Verification, to data from U.S. Department of Homeland Security and Social Security Administration records to confirm employment eligibility.
All applications must be submitted through NW Natural's Electronic Application System. Resumes submitted via email, fax or mail will not be accepted in lieu of an electronic application.
NW Natural is proud to be an equal opportunity employer. We welcome and embrace our candidates' diversity and take affirmative action to employ and advance individuals without discrimination on the basis of race, color, sex, gender identity or expression, sexual orientation, religion, age, physical or mental disability, veteran status, pregnancy (including childbirth or related medical conditions), national origin, marital status, genetic information, and all other legally protected characteristics. We forbid discrimination and harassment in the workplace based on any protected status or characteristic. A criminal history is not an automatic bar to employment with NW Natural. Instead, we make individualized assessments regarding qualifications and backgrounds. NW Natural is also committed to providing reasonable accommodations for individuals with disabilities, individuals with sincerely held religious beliefs, and disabled veterans in our job application procedures. If you need assistance or an accommodation as part of the application process, please contact us at ************************ or **************.
NW Natural does not accept unsolicited submissions or assistance from search firms for posted positions. Resumes submitted by search firms working under a valid and current written contract with NW Natural valid written Statement of Work in place for this position from NW Natural HR/Employment will be deemed the sole property of NW Natural. No fee will be paid in the event the candidate is hired by NW Natural as a result of the referral or through other means.
AI Security Engineer, Lead
Information security analyst job in Portland, OR
If you are a technology visionary with a passion for transforming global tax business with digital technology, consider working with the US Tax Transformation technology team. This is an exciting opportunity to support global execution of Deloitte's tax strategy as we shift from "doing digital" to "being digital" by reimagining how we engage with our clients, deliver our services, operate our business, and create value.
Work you'll do
As a Deloitte Lead AI Security Engineer, you will be crucial in safeguarding our advanced AI models, data, and infrastructure. You'll work closely with Data Scientists, Data Engineers, and MLOps/DevOps teams.
Additional responsibilities include:
+ Implement defences against AI-specific attacks (adversarial, prompt injection, data leakage)
+ Conduct AI-focused security assessments, penetration tests, red/purple team exercises
+ Analyse AI system vulnerabilities, develop mitigation strategies, and create AI risk heat maps
+ Implement security controls throughout the AI/ML lifecycle (data handling, training with GPU isolation, deployment, monitoring, versioning, provenance). Integrate SAST/DAST for ML artifacts
+ Manage audit trails and automated compliance checks
+ Implement AI-specific incident response and develop regulatory disclosure playbooks
+ Manage AI security monitoring, implement executive dashboards linking security to business KPIs, develop security metrics (Adversarial Risk Score, Model Drift Index)
+ Implement secure training environments and fine-grained data access controls
+ Contribute to AI-generated fraud detection in transaction monitoring systems.
+ Act as an AI security SME, continuously research emerging threats
The Team
Deloitte Tax LLP's Tax Transformation Office (TTO) is responsible for the design, development, and deployment of innovative, enterprise technology, tools, and standard processes to support the delivery of tax services. The TTO team focuses on enhancing Deloitte Tax LLP's ability to deliver comprehensive, value-added, and efficient tax services to our clients. It is a dynamic team with professionals of varying backgrounds from tax technical, technology development, change management, Six Sigma, and project management. The team consults and executes on a wide range of initiatives involving process and tool development and implementation including training development, engagement management, tool design, and implementation.
Qualifications
Required:
+ Bachelor's degree in computer science or other relevant discipline.
+ Ability to perform job responsibilities within a hybrid work model that requires US Tax professionals to co-locate in person 2 - 3 days per week.
+ 3+ years' cybersecurity experience (application, cloud and data security) including translating regulatory frameworks (NIST AI RMF, EU AI Act) into technical controls.
+ Demonstrated proficiency in security scripting, automation, and tool development.
+ Hands-on experience with the Azure Cloud ecosystem and its security services.
+ Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve
+ Limited immigration sponsorship may be available.
+ One of the following active accreditations obtained, in process, or willing and able to obtain:
+ Licensed CPA in state of practice/primary office if eligible to sit for the CPA
+ If not CPA eligible:
+ Licensed Attorney
+ Enrolled Agent
+ Technology Certifications:
+ AWS Certified Solutions Architect
+ Certified Information Systems Security Professional (CISSP)
+ Certified SAFe Agile Software Engineer
+ Certified SAFe Agilist
+ Certified SAFe DevOps Practitioner
+ Certified Secure Software Lifecycle Professional (CSSLP)
+ Certified Secure Software Lifecycle Professional (CSSLP) - (ISC)2
+ ISTQB (International Software Testing Qualifications Board)
+ ITIL Certification
+ Microsoft Azure
+ SEI - Software Engineering Institute Certification
Preferred:
+ Expertise in identifying and mitigating AI/ML security threats, including adversarial attacks, prompt injection, and data leakage.
+ Solid knowledge of AI/ML security frameworks (NIST AI RMF, OWASP, ISO/IEC 27001) and ability to apply them as technical controls.
+ Experience applying data privacy regulations (GDPR, DORA, EU AI Act) in enterprise AI environments.
+ Proficiency with Azure security tools (Sentinel, Monitor, Policy, Purview, Key Vault, Azure ML).
+ Hands-on skills in securing and monitoring MLOps/LLMOps pipelines, including data versioning, provenance, GPU isolation, and deployment.
+ Ability to automate compliance, incident detection, and security assessments for AI/ML models, using Azure Monitor, KQL, and related tools.
+ Experience designing secure training environments and implementing fine-grained data access controls.
+ Track record of researching and deploying innovative AI security solutions; recognized as a subject matter expert (SME).
+ Strong communication and collaboration abilities with technical and business teams, translating security risks into actionable business insights.
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $84,980 to $193,440
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Information for applicants with a need for accommodation: ************************************************************************************************************
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.
Google Cloud Security Architect
Information security analyst job in Portland, OR
Who You'll Work With As a modern technology company, our Slalom Technologists are disrupting the market and bringing to life the art of the possible for our clients. We have passion for building strategies, solutions, and creative products to help our clients solve their most complex and interesting business problems. We surround our technologists with interesting challenges, innovative minds, and emerging technologies
As a Consultant or Senior Consultant, you will collaborate with cross-functional teams, including IT, security, and business units, to design and implement Google Cloud-based application innovation solutions. You will work alongside experienced cloud architects, data scientists, and other specialists, ensuring the successful delivery of scalable, cloud-native applications and AI-powered solutions.
What You'll Do
* Stay current with security trends, technologies, and best practices around Google Cloud solutions, leveraging tools like Cloud IAM, Cloud Security Command Center, BeyondCorp, and Cloud Armor.
* Define and guide transformational security strategies for Google Cloud environments, ensuring alignment with Google's Zero Trust and BeyondCorp principles.
* Translate complex regulatory requirements (e.g., GDPR, SOC 2, HIPAA) and technology standards into actionable functional and technical requirements for cloud and hybrid environments, ensuring security and compliance.
* Lead teams through various phases of gap analyses, including security assessments, remediation planning, roadmap development, and implementation of remediation actions using Google Cloud-native tools.
* Deliver on the vision, architecture, execution, and quality assurance of security projects on Google Cloud, driving initiatives that secure enterprise workloads and data.
* Guide stakeholders and senior leaders on aligning security solutions with broader business goals, ensuring the architecture follows Google Cloud's security best practices and roadmap.
* Establish security architecture patterns based on Google Cloud security frameworks and industry standards to meet the unique needs of enterprise clients.
* Collaborate with other Google Cloud architects and security teams to continuously improve security knowledge assets and best practices, ensuring the most effective security solutions for clients.
* Design and architect solutions to secure Generative AI models and applications against adversarial attacks, prompt injection, and their potential misuse for malicious cyber activities.
What You'll Bring
* Proven experience with Google Cloud security architecture, with hands-on experience in tools like Cloud IAM, VPC Service Controls, Cloud DLP, and Cloud Armor.
* Strong background in defining and implementing Zero Trust and BeyondCorp security models within Google Cloud environments.
* Familiarity or direct experience with Identity and Access Management (IAM), Data Protection, Vulnerability Management, and Cloud Security solutions in Google Cloud.
* Extensive experience with security design patterns specific to Google Cloud, as well as hybrid and multi-cloud security architecture.
* Experience in security and risk advisory consulting, particularly related to cloud security transformations.
* Ability to lead the development and implementation of cloud security roadmaps aligned with business goals and compliance needs.
* Familiarity with Google Cloud's Artificial Intelligence (AI) capabilities (e.g., Vertex AI, Generative AI services, Model Armor) including their applications, associated security risks (e.g., prompt injection, data poisoning, privacy concerns), and proven strategies for implementing security controls, governance, and responsible AI practices.
* Relevant certifications are strongly desired, including (but not limited to):
* GCP Professional Security Engineer
* GCP Professional Cloud Architect
* CISSP
* Security+
About Us
Slalom is a fiercely human business and technology consulting company that leads with outcomes to bring more value, in all ways, always. From strategy through delivery, our agile teams across 52 offices in 12 countries collaborate with clients to bring powerful customer experiences, innovative ways of working, and new products and services to life. We are trusted by leaders across the Global 1000, many successful enterprise and mid-market companies, and 500+ public sector organizations to improve operations, drive growth, and create value. At Slalom, we believe that together, we can move faster, dream bigger, and build better tomorrows for all.
Compensation and Benefits
Slalom prides itself on helping team members thrive in their work and life. As a result, Slalom is proud to invest in benefits that include meaningful time off and paid holidays, parental leave, 401(k) with a match, a range of choices for highly subsidized health, dental, & vision coverage, adoption and fertility assistance, and short/long-term disability. We also offer yearly $350 reimbursement account for any well-being-related expenses, as well as discounted home, auto, and pet insurance.
Slalom is committed to fair and equitable compensation practices. For this position the base salary pay ranges are listed below. In addition, individuals may be eligible for an annual discretionary bonus. Actual compensation will depend upon an individual's skills, experience, qualifications, location, and other relevant factors. The salary pay range is subject to change and may be modified at any time.
East Bay, San Francisco, Silicon Valley:
* Consultant: $120,000-$177,000
* Senior Consultant: $140,000-$203,000
San Diego, Los Angeles, Orange County, Seattle, Houston, New Jersey, New York City, Westchester, Boston, Washington DC:
* Consultant: $110,000-$162,000
* Senior Consultant: $130,000-$186,000
All other locations:
* Consultant: $105,000-$148,000
* Senior Consultant: $115,000-$171,000
EEO and Accommodations
Slalom is an equal opportunity employer and is committed to inclusion, diversity, and equity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veterans' status, or any other characteristic protected by federal, state, or local laws. Slalom will also consider qualified applications with criminal histories, consistent with legal requirements. Slalom welcomes and encourages applications from individuals with disabilities. Reasonable accommodations are available for candidates during all aspects of the selection process. Please advise the talent acquisition team if you require accommodations during the interview process.
We are accepting applications until 12/31.
Security Engineer
Information security analyst job in Hillsboro, OR
Rajesh
KRG Technologies Inc.
25000 | Avenue Stanford | Suite 253 | Valencia, CA 91355
rajesh.b at krgtech.com / ************ EXT- 514
Job Description :
General Cryptography (symmetric algorithms like AES, DES and asymmetric or public crypto like RSA, EC)
Experience of open security suites like Openssl, embed TLS, Elgamal or other opensource secure communication packages which export general crypto api's (e.g. Open SSL, Elgamal)
Public key and private key concepts
Programming in ‘C'
Preferred:
Basic kernel driver development concepts, linux Userspace
Desirable :
DRM's, NOCS, Nagra
Additional Information
All your information will be kept confidential according to EEO guidelines.
AI Security Engineer
Information security analyst job in Camas, WA
We are looking for an AI Security Engineer to design, implement, and secure our next generation of AI solutions. You will combine hands-on engineering with security and governance expertise to ensure safe and compliant AI adoption. You will build and maintain AI guardrails, enforce Agent RBAC and permissions tied to firm roles, and integrate Data Loss Prevention (DLP) pipelines to protect sensitive information from leaking into LLM endpoints. Partnering with cloud, security, and governance teams, you will evaluate AI architectures for bias, drift, and risk, while aligning them with frameworks like NIST AI RMF, EU AI Act, and ISO/IEC 42001. You are equally comfortable developing AI security controls in Python/YAML as they are advising on compliance strategy - ensuring Fisher Investments leverages AI responsibly, securely, and at scale. You will report to the Team Lead.
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to ********************.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: ****************************************************
Skills and Requirements
- 7+ years in IT, Information Security, or AI/ML engineering roles, with experience in:
Design, reviewing, and implementing secure AI programs in enterprise environments
Apply compliance frameworks (ISO 27001, SOC 2, NIST AI RMF, EU AI Act, ISO/IEC 42001)
Build RBAC/ABAC-based permission models for AI agents and personas
- 2+ years of hands-on AI/ML administration or engineering, including:
Experience with NVIDIA NeMo Guardrails, Azure AI Foundry, or similar platforms
Design and deploy DLP solutions or privacy-preserving data pipelines for AI
Support AI and security operations in a large enterprise
- Proficiency with Terraform, Python, and cloud automation
Prior experience in cloud security, data protection, and SIEM/logging for AI traffic - Leadership experience is a nice to have
Senior Security Engineer
Information security analyst job in Happy Valley, OR
At Pacific Seafood, we do more than just provide the world with the healthiest proteins on the planet. We are a family-owned, excellence-driven organization committed to being the brand of choice in the marketplace and the employer of choice in the community. We believe in servant leadership, investing in our team members' personal and professional growth, and rewarding performance. We live by the core values of our Diamond Philosophy: Teamwork, Productivity, Quality, and Excellence-which means consistently doing your best and always striving to do better.
Summary:
The Senior Security Engineer at Pacific Seafood is a key role in our information technology team supporting efforts to strengthen, enhance, and protect the security posture of our enterprise environment. This position involves leading security initiatives, monitoring and improving security controls, driving incident response and partnering across IT and business teams and is ideal for someone who is proactive, highly analytical, calm under pressure and passionate about building a security by design culture.
Key Responsibilities:
1. Security Engineering & Architecture:
* Establish, maintain and implement enterprise security best practices, policies and hardening standards
* Participate in architectural reviews and provide security requirements for new systems, applications, cloud resources and infrastructure
* Integrate new security technologies into existing environments and ensure secure configuration of all systems
2. Threat Detection & Vulnerability Management:
* Leverage and centralize all logging platforms
* Conduct proactive threat hunting, log analysis and behavioral detection reviews
* Perform vulnerability scanning, prioritization, and remediation planning with cross functional teams
3. Incident Response & Security Operations:
* Oversee the incident response lifecycle including detection, containment, eradication and recovery
* Develop incident response playbooks and runbooks, and post-incident review documentation
* Support endpoint detection and response, antivirus tools, server/endpoint security controls
4. Network, Analysis & Security:
* New Network Device Detection and Threat Determination
* Device Anomalous Communication Detection and Remediation
* Network segmentation strategy
* Firewall Device and User Policy Determination
* Other duties as assigned
Additional responsibilities may be assigned as deemed necessary to support the overall goals and objectives of the position.
What you bring to Pacific Seafood:
Required:
* Bachelor's degree in Computer Science or equivalent professional experience
* Minimum of five years of related experience in information security or infrastructure security
* Strong experience with Active Directory, Azure Entra ID, MFA, and identity lifecycle management
* Hands-on experience with endpoint and server security tools including EDR, anti-virus, and configuration baselines
* Working knowledge of firewalls, enterprise networking, and network security policies
* Experience with centralized logging solutions, SIEM tools, and vulnerability scanners
* Ability to analyze technical and non-technical controls, identify gaps, and propose remediations
* Experience conducting internal security audits, investigations, and compliance reviews
* Strong communication, documentation, and problem-solving skills
* Ability to travel as necessary; valid driver's license
Preferred:
* Experience leading enterprise-wide security projects or architectural reviews
* Palo Alto Security toolset experience (Strata, IoT, PanOS, Cortex XDR)
* Experience with Microsoft Exchange, Microsoft Purview, and email security tools
* Experience with privileged access management (PAM) systems
* Threat hunting and SIEM rule development experience (Sentinel, LogRhythm, etc.)
* Security certifications such as CISSP, GSEC, CEH, or equivalent
Total compensation:
At Pacific Seafood your base wage is only a portion of your overall compensation package. We invest in our Team Members through a comprehensive and attractive total rewards package, including but not limited to:
* Health insurance benefits options, including medical, prescription, vision, dental, basic group life and short term disability.
* Flexible spending accounts for health flex and dependent care expenses
* 401(k) Retirement Plan options with generous annual company profit sharing match
* Paid time off for all regular FT team members, to include sick days, paid holidays, vacation and personal time
* Employee Assistance Program- Confidential professional counseling, financial, and legal assistance provided at no charge to Team Members and immediate family members
* Product purchase program
Security Engineer (K3s Security & Isolation Specialist)
Information security analyst job in Hillsboro, OR
The Security Engineer will focus on hardening and isolating K3s clusters to minimize blast radius in the event of compromise. This includes enforcing Linux security modules (SELinux, AppArmor), leveraging TPM for secure boot and attestation, implementing least privilege across nodes and workloads, and ensuring multi-tenant isolation within hybrid Kubernetes environments (x86, ARM, accelerators).
Responsibilities
Security Architecture & Policy Enforcement
Design and implement security-first cluster configurations for K3s nodes.
Enforce mandatory access control (MAC) using SELinux and AppArmor profiles for pods and system services.
Integrate TPM-based attestation and secure boot for cluster nodes to ensure trust in hardware and OS integrity.
Establish node, pod, and namespace isolation strategies to reduce lateral movement risk.
Harden cluster components (API server, etcd, kubelet) following CIS and NSA Kubernetes security benchmarks.
Blast Radius Reduction
Define and enforce workload sandboxing strategies (seccomp, AppArmor, SELinux contexts, gVisor/Kata if applicable).
Configure minimal privilege policies (RBAC, PodSecurityStandards, NetworkPolicies) to ensure least-privilege execution.
Implement namespace, node pool, and hardware partitioning to confine workloads and protect sensitive applications.
Apply resource quotas, limits, and scheduling constraints to contain denial-of-service blast radius.
Integration with Identity & Secrets Management
Work with Security team to ensure strong identity, authentication, and authorization models.
Integrate TPM-backed secrets storage and HSM/KMS systems for cryptographic operations.
Ensure secure distribution of workload secrets with solutions like SealedSecrets, HashiCorp Vault, or SOPS.
Runtime & Supply Chain Security
Enforce image signing and verification with cosign or Notary.
Integrate SBOM scanning and vulnerability management into CI/CD pipelines.
Monitor workloads for runtime anomalies (Falco, Cilium Tetragon, or equivalent).
Apply kernel hardening measures (seccomp-bpf, kernel lockdown, IMA/EVM with TPM).
Monitoring & Incident Response
Build observability hooks for security events (audit logs, syscall monitoring, TPM attestations).
Define blast radius response runbooks for compromised pods or nodes.
Work with SRE and Security teams to test chaos/security drills simulating breaches.
Deliverables
K3s cluster baseline hardened with SELinux and AppArmor profiles.
TPM-enabled secure boot and node attestation pipeline.
Enforced PodSecurityStandards and workload sandboxing (seccomp, gVisor/Kata optional).
Documentation of isolation strategies (namespaces, node pools, network segmentation).
Audit-ready evidence of compliance with CIS/NSA Kubernetes security benchmarks.
Security runbooks for containment and blast radius reduction.
Required Skills & Experience
Strong knowledge of K3s/Kubernetes internals, especially security features.
Hands-on experience with SELinux, AppArmor, seccomp, and Linux capabilities.
Experience with TPM (Trusted Platform Module) for secure boot and attestation.
Deep understanding of Pod Security (PodSecurityPolicies/Standards, OPA/Gatekeeper/Kyverno).
Experience implementing RBAC, NetworkPolicies, and workload isolation at scale.
Proficiency in Linux kernel security mechanisms and debugging.
Familiarity with container runtimes (containerd, CRI-O, gVisor, Kata) and their security implications.
Strong background in incident response, forensic data collection, and audit logging in Kubernetes.
Nice to Have
Contributions to Kubernetes SIG-Security or open-source security tooling.
Experience with supply chain security frameworks (SLSA, NIST 800-190).
Familiarity with confidential computing (TEE/SGX/SEV) for workload isolation.
Hands-on with Cilium Tetragon, Falco, or other runtime security tools.
Knowledge of air-gapped deployments and hardened Linux distributions (e.g., Flatcar, Bottlerocket).
Auto-ApplyCyber Security Analyst
Information security analyst job in Beaverton, OR
FLEX IT has an immediate need for a Cyber Security Analyst with a proven track record of delivering world-class results with our Enterprise level client. The ideal candidate will bring a broad range of lean and agile experiences working within large-scale organizations.
ALL LEVELS OF Cyber Security Analysts ARE ENCOURAGED TO APPLY
Top Skillsets: (Based on Requirement)
-Knowledge of information security standards, principles, and practices
-Computer programming and/or scripting languages (Python, PowerShell, Java Script, Go)
-Experience with massive log aggregation and analysis
-Comfortable interfacing with other organizations regarding security policy
Job Responsibilities:
Elevate security analytics by distilling complex analytical concepts
Enable a culture of data driven decision making
Minimize complexity and focus on results
Thrive in an entrepreneurial environment
Use data to prove your point, think outside the box and solve problem creatively
Perform log analysis and correlate disparate datasets to identify abnormal behavior.
Respond to security events, drive issues to closure, and engage all appropriate resources.
Support service request in-take process and communicate back to requestors promptly.
Provide enforcement of security policies, standards and procedures.
Stay current on security technologies, trends, standards and best practices.
Creation of new alerts and rule logic adjustments.
Document Security process and procedures, as well as providing input for streamlining and updates of current procedures.
Respond to security alerts in a fast-paced, 24x7x365 operational environment across Windows, Linux, Mac, and Azure/AWS cloud systems and additional 2nd tier requests.
Investigate phishing and malware incidents using EDR, SIEM, and proxy tools as well as forensic artifacts such as running processes and network connections
Malware research and sandboxing.
Collaborate with IR analysts to test and build new SOAR playbooks and command-line tools using Python, enabling automated response to malicious browser extensions and cyber threat intelligence IOCs
Identify opportunities for security alert tuning and assist with deployment, reducing triaged tickets
Shifts
12-hr
Repeat Cycle
10 Weeks
Rotation
Fixed plan, no rotation
Week one
24 Hours
Week Two
60 Hours
2-2-3 Schedule Example below:
Work two days, two days off, work three days.
Two days off, Work two days, Three days off.
The schedule is a rotating 10 weeks of days and then 10 weeks of nights.
At Flex IT we believe that diverse teams improve our business. We are an equal opportunity employer and do not discriminate on the basis of race, religion, color, nationality, gender, sexual orientation, age, marital status, veteran status, or disability status.
Flex IT is an IT Services Firm dedicated to advancing the careers of IT Professionals. We work with some of the most recognized companies in the country to place IT professionals that stand out amongst their peers. Talented individuals need challenging opportunities. To discover your next great opportunity and begin to build a career path, contact us today.
Identity Security Analyst
Information security analyst job in Hillsboro, OR
The world is transforming - and so is Intel. Intel is a company of bold and curious inventors and problem solvers who create some of the most astounding technology advancements and experiences in the world. With a legacy of relentless innovation and a commitment to bring smart, connected devices to every person on Earth, our diverse and brilliant teams are continually searching for tomorrow's technology and revel in the challenge that changing the world for the better brings. We work every single day to design and manufacture silicon products that empower people's digital lives. Come join us and do something wonderful.
Who we Are:
Intel's Information Security organization enables Intel to provide secure products, solutions, and services which meet U.S. regulatory requirements. The Information Security organization supports the unique IT information Security and Compliance requirements for Intel Federal projects that deliver products and/or services to the US Government (USG).As part of this team, you will help us grow our secure solution suite to meet U.S. Government requirements. The Intel Information Security organization is seeking an Identity Security Analyst. The candidate chosen for this role will assist senior engineers with design, architecture, and build of secure classified network products to support USG operations.
Primary duties and responsibilities:
* Assist with architecting identity and identity security products in secured enclaves, including product testing, validation, and selection.
* Assist with design and long-term roadmap planning for new and future scalability in secure enclaves.
* Coordinate security assessments to identify security control failures and recommend corrective actions.
* Development and configuration experience of various SailPoint IIQ modules (e.g. audit, compliance, lifecycle, service account, Microsoft Active Directory connector).
* Design and integration of Microsoft Active Directory.
* Design and deploy custom forms, approval workflows, connections in SailPoint for access requests, access certifications, and provisioning.
* Automate processes in the SailPoint toolset using PowerShell scripting.
* Business travel is required as needed.
* Ability to thrive in dynamic and fast-paced environments.
* Excellent communication, leadership, strong troubleshooting, debugging, and analytical skills.
Qualifications:
You must possess the below minimum qualifications to be initially considered for this position. Preferred qualifications are in addition to the minimum requirements and are considered a plus factor in identifying top candidates. Experience listed below would be obtained through a combination of your degree, research and or relevant previous job and or internship experiences.
Minimum Qualifications:
* US Citizenship required
* Ability to obtain and maintain a US Government Security Clearance
* High School /Equivalent Diploma and 3+ years of applicable experience with at least one of the following certifications: CISSP, CISM, CASP E, Security+ OR Bachelor's degree and 2+ years of applicable experience
* 2+ years' experience configuring Access Profiles, Roles, and Identity Profiles
* 2+ years' experience in Active Directory
* 2+ years' experience in APIs (RESTful services preferred)
* 1+ years' experience in implementing and supporting SailPoint IIQ modules like Compliance Manager, Lifecycle Manager, Integration modules, in both production and nonproduction environments
* 1+ years' experience in designing and implementing custom SailPoint solutions
Preferred Qualifications:
* Active US Government Top Secret (TS) Security Clearance with the ability to obtain and maintain SCI access
* Bachelor's degree in Systems Engineering, Cyber Security Engineering, Computer Engineering, Computer Science, Information Systems, or similar discipline and four years of work-related experience; or an equivalent combination of education and experience
* Experience with DoD security implementation (e.g. STIG) and security tools for managing the environment
* Experience with business continuity and disaster recovery
* Experience with scripting in the Windows and UNIX environment
* Experience with Microsoft SQL Server 2019/2022
* Experience with Web Tech: HTML, JavaScript, JSP, XML, XSL, and DTD
Job Type:
Experienced Hire
Shift:
Shift 1 (United States of America)
Primary Location:
US, California, Santa Clara
Additional Locations:
US, Arizona, Phoenix, US, Oregon, Hillsboro
Business group:
As members of the Finance team, employees act as full partners in making and supporting business decisions that are aimed at maximizing shareholder value. Intel Finance has a strong focus on facilitating change and improvement both within finance and in the operations supported.
Posting Statement:
All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.
Position of Trust
N/A
Benefits:
We offer a total compensation package that ranks among the best in the industry. It consists of competitive pay, stock, bonuses, as well as, benefit programs which include health, retirement, and vacation. Find more information about all of our Amazing Benefits here:
**********************************************************************************
Annual Salary Range for jobs which could be performed in the US: 123,130.00 USD - 173,830.00 USD
The range displayed on this job posting reflects the minimum and maximum target compensation for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific compensation range for your preferred location during the hiring process.
Work Model for this Role
This role will require an on-site presence. * Job posting details (such as work model, location or time type) are subject to change.
Auto-ApplyAI Security Engineer, Lead
Information security analyst job in Portland, OR
If you are a technology visionary with a passion for transforming global tax business with digital technology, consider working with the US Tax Transformation technology team. This is an exciting opportunity to support global execution of Deloitte's tax strategy as we shift from "doing digital" to "being digital" by reimagining how we engage with our clients, deliver our services, operate our business, and create value.
Work you'll do
As a Deloitte Lead AI Security Engineer, you will be crucial in safeguarding our advanced AI models, data, and infrastructure. You'll work closely with Data Scientists, Data Engineers, and MLOps/DevOps teams.
Additional responsibilities include:
* Implement defences against AI-specific attacks (adversarial, prompt injection, data leakage)
* Conduct AI-focused security assessments, penetration tests, red/purple team exercises
* Analyse AI system vulnerabilities, develop mitigation strategies, and create AI risk heat maps
* Implement security controls throughout the AI/ML lifecycle (data handling, training with GPU isolation, deployment, monitoring, versioning, provenance). Integrate SAST/DAST for ML artifacts
* Manage audit trails and automated compliance checks
* Implement AI-specific incident response and develop regulatory disclosure playbooks
* Manage AI security monitoring, implement executive dashboards linking security to business KPIs, develop security metrics (Adversarial Risk Score, Model Drift Index)
* Implement secure training environments and fine-grained data access controls
* Contribute to AI-generated fraud detection in transaction monitoring systems.
* Act as an AI security SME, continuously research emerging threats
The Team
Deloitte Tax LLP's Tax Transformation Office (TTO) is responsible for the design, development, and deployment of innovative, enterprise technology, tools, and standard processes to support the delivery of tax services. The TTO team focuses on enhancing Deloitte Tax LLP's ability to deliver comprehensive, value-added, and efficient tax services to our clients. It is a dynamic team with professionals of varying backgrounds from tax technical, technology development, change management, Six Sigma, and project management. The team consults and executes on a wide range of initiatives involving process and tool development and implementation including training development, engagement management, tool design, and implementation.
Qualifications
Required:
* Bachelor's degree in computer science or other relevant discipline.
* Ability to perform job responsibilities within a hybrid work model that requires US Tax professionals to co-locate in person 2 - 3 days per week.
* 3+ years' cybersecurity experience (application, cloud and data security) including translating regulatory frameworks (NIST AI RMF, EU AI Act) into technical controls.
* Demonstrated proficiency in security scripting, automation, and tool development.
* Hands-on experience with the Azure Cloud ecosystem and its security services.
* Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve
* Limited immigration sponsorship may be available.
* One of the following active accreditations obtained, in process, or willing and able to obtain:
* Licensed CPA in state of practice/primary office if eligible to sit for the CPA
* If not CPA eligible:
* Licensed Attorney
* Enrolled Agent
* Technology Certifications:
* AWS Certified Solutions Architect
* Certified Information Systems Security Professional (CISSP)
* Certified SAFe Agile Software Engineer
* Certified SAFe Agilist
* Certified SAFe DevOps Practitioner
* Certified Secure Software Lifecycle Professional (CSSLP)
* Certified Secure Software Lifecycle Professional (CSSLP) - (ISC)2
* ISTQB (International Software Testing Qualifications Board)
* ITIL Certification
* Microsoft Azure
* SEI - Software Engineering Institute Certification
Preferred:
* Expertise in identifying and mitigating AI/ML security threats, including adversarial attacks, prompt injection, and data leakage.
* Solid knowledge of AI/ML security frameworks (NIST AI RMF, OWASP, ISO/IEC 27001) and ability to apply them as technical controls.
* Experience applying data privacy regulations (GDPR, DORA, EU AI Act) in enterprise AI environments.
* Proficiency with Azure security tools (Sentinel, Monitor, Policy, Purview, Key Vault, Azure ML).
* Hands-on skills in securing and monitoring MLOps/LLMOps pipelines, including data versioning, provenance, GPU isolation, and deployment.
* Ability to automate compliance, incident detection, and security assessments for AI/ML models, using Azure Monitor, KQL, and related tools.
* Experience designing secure training environments and implementing fine-grained data access controls.
* Track record of researching and deploying innovative AI security solutions; recognized as a subject matter expert (SME).
* Strong communication and collaboration abilities with technical and business teams, translating security risks into actionable business insights.
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $84,980 to $193,440
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Information for applicants with a need for accommodation: ************************************************************************************************************
Recruiting tips
From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.
Benefits
At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you.
Our people and culture
Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives, and bring more creativity and innovation to help solve our clients' most complex challenges. This makes Deloitte one of the most rewarding places to work.
Our purpose
Deloitte's purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities. Learn more.
Professional development
From entry-level employees to senior leaders, we believe there's always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
As used in this posting, "Deloitte" means Deloitte Tax LLP, a subsidiary of Deloitte LLP. Please see ********************************* for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. Certain services may not be available to attest clients under the rules and regulations of public accounting.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.
Qualified applicants with criminal histories, including arrest or conviction records, will be considered for employment in accordance with the requirements of applicable state and local laws, including the Los Angeles County Fair Chance Ordinance for Employers, City of Los Angeles's Fair Chance Initiative for Hiring Ordinance, San Francisco Fair Chance Ordinance, and the California Fair Chance Act. See notices of various fair chance hiring and ban-the-box laws where available. Fair Chance Hiring and Ban-the-Box Notices | Deloitte US Careers
Requisition code: 315506
Job ID 315506
Google Cloud Security Architect
Information security analyst job in Portland, OR
Who You'll Work With As a modern technology company, our Slalom Technologists are disrupting the market and bringing to life the art of the possible for our clients. We have passion for building strategies, solutions, and creative products to help our clients solve their most complex and interesting business problems. We surround our technologists with interesting challenges, innovative minds, and emerging technologies.
Join the Slalom Cloud Team -a team of trailblazers ensuring we achieve our strategic goals through innovation and investment in the future. You'll collaborate with local market teams, niche experts, and global partners to drive cloud solution sales and empower clients on their cloud transformation journey. As a key member of Slalom's Google Cloud Center of Excellence, you'll leverage our award-winning partnerships and multidisciplinary teams to deliver business value and technical excellence for high-impact security and infrastructure solutions.
What You'll Do
* Stay current with security trends, technologies, and best practices around Google Cloud solutions, leveraging tools like Cloud IAM, Cloud Security Command Center, BeyondCorp, and Cloud Armor.
* Define and guide transformational security strategies for Google Cloud environments, ensuring alignment with Google's Zero Trust and BeyondCorp principles.
* Translate complex regulatory requirements (e.g., GDPR, SOC 2, HIPAA) and technology standards into actionable functional and technical requirements for cloud and hybrid environments, ensuring security and compliance.
* Lead teams through various phases of gap analyses, including security assessments, remediation planning, roadmap development, and implementation of remediation actions using Google Cloud-native tools.
* Deliver on the vision, architecture, execution, and quality assurance of security projects on Google Cloud, driving initiatives that secure enterprise workloads and data.
* Guide stakeholders and senior leaders on aligning security solutions with broader business goals, ensuring the architecture follows Google Cloud's security best practices and roadmap.
* Establish security architecture patterns based on Google Cloud security frameworks and industry standards to meet the unique needs of enterprise clients.
* Collaborate with other Google Cloud architects and security teams to continuously improve security knowledge assets and best practices, ensuring the most effective security solutions for clients.
* Design and architect solutions to secure Generative AI models and applications against adversarial attacks, prompt injection, and their potential misuse for malicious cyber activities.
What You'll Bring
* Proven experience with Google Cloud security architecture, with hands-on experience in tools like Cloud IAM, VPC Service Controls, Cloud DLP, and Cloud Armor.
* Strong background in defining and implementing Zero Trust and BeyondCorp security models within Google Cloud environments.
* Familiarity or direct experience with Identity and Access Management (IAM), Data Protection, Vulnerability Management, and Cloud Security solutions in Google Cloud.
* Extensive experience with security design patterns specific to Google Cloud, as well as hybrid and multi-cloud security architecture.
* Experience in security and risk advisory consulting, particularly related to cloud security transformations.
* Ability to lead the development and implementation of cloud security roadmaps aligned with business goals and compliance needs.
* Familiarity with Google Cloud's Artificial Intelligence (AI) capabilities (e.g., Vertex AI, Generative AI services, Model Armor) including their applications, associated security risks (e.g., prompt injection, data poisoning, privacy concerns), and proven strategies for implementing security controls, governance, and responsible AI practices.
* Relevant certifications are strongly desired but not required, including (but not limited to):
* GCP Professional Security Engineer
* GCP Professional Cloud Architect
* CISSP
* Security+
About Us
Slalom is a fiercely human business and technology consulting company that leads with outcomes to bring more value, in all ways, always. From strategy through delivery, our agile teams across 52 offices in 12 countries collaborate with clients to bring powerful customer experiences, innovative ways of working, and new products and services to life. We are trusted by leaders across the Global 1000, many successful enterprise and mid-market companies, and 500+ public sector organizations to improve operations, drive growth, and create value. At Slalom, we believe that together, we can move faster, dream bigger, and build better tomorrows for all.
Compensation and Benefits
Slalom prides itself on helping team members thrive in their work and life. As a result, Slalom is proud to invest in benefits that include meaningful time off and paid holidays, parental leave, 401(k) with a match, a range of choices for highly subsidized health, dental, & vision coverage, adoption and fertility assistance, and short/long-term disability. We also offer yearly $350 reimbursement account for any well-being-related expenses, as well as discounted home, auto, and pet insurance.
Slalom is committed to fair and equitable compensation practices.
Slalom is committed to fair and equitable compensation practices. For this role, we are targeting the following levels and salary ranges:
East Bay, San Francisco, Silicon Valley:
* Senior Consultant: $131,000-$196,500
San Diego, Los Angeles, Orange County, Seattle, Houston, New Jersey, New York City, Westchester, Boston, Washington DC:
* Senior Consultant: $120,000-$180,000
All other locations:
* Senior Consultant: $110,000-$165,000
In addition, individuals may be eligible for an annual discretionary bonus. Actual compensation will depend upon an individual's skills, experience, qualifications, location, and other relevant factors. The salary pay range is subject to change and may be modified at any time.
EEO and Accommodations
Slalom is an equal opportunity employer and is committed to inclusion, diversity, and equity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veterans' status, or any other characteristic protected by federal, state, or local laws. Slalom will also consider qualified applications with criminal histories, consistent with legal requirements. Slalom welcomes and encourages applications from individuals with disabilities. Reasonable accommodations are available for candidates during all aspects of the selection process. Please advise the talent acquisition team if you require accommodations during the interview process.
Senior Security Engineer
Information security analyst job in Happy Valley, OR
Job Description
At Pacific Seafood, we do more than just provide the world with the healthiest proteins on the planet. We are a family-owned, excellence-driven organization committed to being the brand of choice in the marketplace and the employer of choice in the community. We believe in servant leadership, investing in our team members' personal and professional growth, and rewarding performance. We live by the core values of our Diamond Philosophy: Teamwork, Productivity, Quality, and Excellence-which means consistently doing your best and always striving to do better.
Summary:
The Senior Security Engineer at Pacific Seafood is a key role in our information technology team supporting efforts to strengthen, enhance, and protect the security posture of our enterprise environment. This position involves leading security initiatives, monitoring and improving security controls, driving incident response and partnering across IT and business teams and is ideal for someone who is proactive, highly analytical, calm under pressure and passionate about building a security by design culture.
Key Responsibilities:
1. Security Engineering & Architecture:
Establish, maintain and implement enterprise security best practices, policies and hardening standards
Participate in architectural reviews and provide security requirements for new systems, applications, cloud resources and infrastructure
Integrate new security technologies into existing environments and ensure secure configuration of all systems
2. Threat Detection & Vulnerability Management:
Leverage and centralize all logging platforms
Conduct proactive threat hunting, log analysis and behavioral detection reviews
Perform vulnerability scanning, prioritization, and remediation planning with cross functional teams
3. Incident Response & Security Operations:
Oversee the incident response lifecycle including detection, containment, eradication and recovery
Develop incident response playbooks and runbooks, and post-incident review documentation
Support endpoint detection and response, antivirus tools, server/endpoint security controls
4. Network, Analysis & Security:
New Network Device Detection and Threat Determination
Device Anomalous Communication Detection and Remediation
Network segmentation strategy
Firewall Device and User Policy Determination
Other duties as assigned
Additional responsibilities may be assigned as deemed necessary to support the overall goals and objectives of the position.
What you bring to Pacific Seafood:
Required:
Bachelor's degree in Computer Science or equivalent professional experience
Minimum of five years of related experience in information security or infrastructure security
Strong experience with Active Directory, Azure Entra ID, MFA, and identity lifecycle management
Hands-on experience with endpoint and server security tools including EDR, anti-virus, and configuration baselines
Working knowledge of firewalls, enterprise networking, and network security policies
Experience with centralized logging solutions, SIEM tools, and vulnerability scanners
Ability to analyze technical and non-technical controls, identify gaps, and propose remediations
Experience conducting internal security audits, investigations, and compliance reviews
Strong communication, documentation, and problem-solving skills
Ability to travel as necessary; valid driver's license
Preferred:
Experience leading enterprise-wide security projects or architectural reviews
Palo Alto Security toolset experience (Strata, IoT, PanOS, Cortex XDR)
Experience with Microsoft Exchange, Microsoft Purview, and email security tools
Experience with privileged access management (PAM) systems
Threat hunting and SIEM rule development experience (Sentinel, LogRhythm, etc.)
Security certifications such as CISSP, GSEC, CEH, or equivalent
Total compensation:
At Pacific Seafood your base wage is only a portion of your overall compensation package. We invest in our Team Members through a comprehensive and attractive total rewards package, including but not limited to:
Health insurance benefits options, including medical, prescription, vision, dental, basic group life and short term disability.
Flexible spending accounts for health flex and dependent care expenses
401(k) Retirement Plan options with generous annual company profit sharing match
Paid time off for all regular FT team members, to include sick days, paid holidays, vacation and personal time
Employee Assistance Program- Confidential professional counseling, financial, and legal assistance provided at no charge to Team Members and immediate family members
Product purchase program
Pacific Seafood is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.
Powered by JazzHR
mBmt6CwGJB
Security Engineer (K3s Security & Isolation Specialist)
Information security analyst job in Hillsboro, OR
Job Description
The Security Engineer will focus on hardening and isolating K3s clusters to minimize blast radius in the event of compromise. This includes enforcing Linux security modules (SELinux, AppArmor), leveraging TPM for secure boot and attestation, implementing least privilege across nodes and workloads, and ensuring multi-tenant isolation within hybrid Kubernetes environments (x86, ARM, accelerators).
Responsibilities
Security Architecture & Policy Enforcement
Design and implement security-first cluster configurations for K3s nodes.
Enforce mandatory access control (MAC) using SELinux and AppArmor profiles for pods and system services.
Integrate TPM-based attestation and secure boot for cluster nodes to ensure trust in hardware and OS integrity.
Establish node, pod, and namespace isolation strategies to reduce lateral movement risk.
Harden cluster components (API server, etcd, kubelet) following CIS and NSA Kubernetes security benchmarks.
Blast Radius Reduction
Define and enforce workload sandboxing strategies (seccomp, AppArmor, SELinux contexts, gVisor/Kata if applicable).
Configure minimal privilege policies (RBAC, PodSecurityStandards, NetworkPolicies) to ensure least-privilege execution.
Implement namespace, node pool, and hardware partitioning to confine workloads and protect sensitive applications.
Apply resource quotas, limits, and scheduling constraints to contain denial-of-service blast radius.
Integration with Identity & Secrets Management
Work with Security team to ensure strong identity, authentication, and authorization models.
Integrate TPM-backed secrets storage and HSM/KMS systems for cryptographic operations.
Ensure secure distribution of workload secrets with solutions like SealedSecrets, HashiCorp Vault, or SOPS.
Runtime & Supply Chain Security
Enforce image signing and verification with cosign or Notary.
Integrate SBOM scanning and vulnerability management into CI/CD pipelines.
Monitor workloads for runtime anomalies (Falco, Cilium Tetragon, or equivalent).
Apply kernel hardening measures (seccomp-bpf, kernel lockdown, IMA/EVM with TPM).
Monitoring & Incident Response
Build observability hooks for security events (audit logs, syscall monitoring, TPM attestations).
Define blast radius response runbooks for compromised pods or nodes.
Work with SRE and Security teams to test chaos/security drills simulating breaches.
Deliverables
K3s cluster baseline hardened with SELinux and AppArmor profiles.
TPM-enabled secure boot and node attestation pipeline.
Enforced PodSecurityStandards and workload sandboxing (seccomp, gVisor/Kata optional).
Documentation of isolation strategies (namespaces, node pools, network segmentation).
Audit-ready evidence of compliance with CIS/NSA Kubernetes security benchmarks.
Security runbooks for containment and blast radius reduction.
Required Skills & Experience
Strong knowledge of K3s/Kubernetes internals, especially security features.
Hands-on experience with SELinux, AppArmor, seccomp, and Linux capabilities.
Experience with TPM (Trusted Platform Module) for secure boot and attestation.
Deep understanding of Pod Security (PodSecurityPolicies/Standards, OPA/Gatekeeper/Kyverno).
Experience implementing RBAC, NetworkPolicies, and workload isolation at scale.
Proficiency in Linux kernel security mechanisms and debugging.
Familiarity with container runtimes (containerd, CRI-O, gVisor, Kata) and their security implications.
Strong background in incident response, forensic data collection, and audit logging in Kubernetes.
Nice to Have
Contributions to Kubernetes SIG-Security or open-source security tooling.
Experience with supply chain security frameworks (SLSA, NIST 800-190).
Familiarity with confidential computing (TEE/SGX/SEV) for workload isolation.
Hands-on with Cilium Tetragon, Falco, or other runtime security tools.
Knowledge of air-gapped deployments and hardened Linux distributions (e.g., Flatcar, Bottlerocket).
Security Service Delivery Analyst
Information security analyst job in Beaverton, OR
Responsibilities
Conduct initial evaluations of ASC security inquiries to determine the treatment level needed for each potential request
Enter security request information into tools used by ASC, verify the information provided, and assign the request to the appropriate resource
Research and respond to questions submitted by our key partners or Corporate Information Security teams
Manage Intake for security requests by supporting the tracking of ASC Security Review requests, risks assigned to ASC Consultants, and SecureCode requests.
Maintain Application Security Review process to include identifying gaps and enhancements necessary to reduce risk
Facilitate stand-ups with ASC consultants to manage active work being managed in team tracking tools including new development and risk remediation
Active participant of the Risk Translation Counsel supporting improvements for data integrity in the Risk Register to include proper assignment for Risk Owner, Global Technology or business team, and Risk Consultant.
Active member of the Risk Solutioning team supporting Risks Life Cycle process improvements
Training for Risk Life Cycle process for new ASC team resources
Partner with GRC to inform ASC team resources of Risk Life Cycle process or Risk Register changes
Work with ASC MT to improve on current Risk Register update processes
Review and track ASC assigned security risks entered in the Risk Register to validate updates are current
Gather data for various reports for ASC, and Global Technology leadership
Enhance reporting processes to improve efficiency of gathering and tracking of data needed for metrics,
Provide process recommendations and/or recommend alternate solutions to resolve gaps with team processes